From: ivan <ivan>
Date: Sun, 13 Jan 2008 20:50:24 +0000 (+0000)
Subject: stale leftovers from XSSmas
X-Git-Tag: freeside_1_7_3rc1~145
X-Git-Url: http://git.freeside.biz/gitweb/?a=commitdiff_plain;h=3d7f98ef055d07d16512fb9bebe76f44da68eb56;p=freeside.git

stale leftovers from XSSmas
---

diff --git a/httemplate/elements/errorpage.html b/httemplate/elements/errorpage.html
index 17b0dcf62..76a0bf32e 100644
--- a/httemplate/elements/errorpage.html
+++ b/httemplate/elements/errorpage.html
@@ -2,7 +2,7 @@
 
 % while (@_) {
 
-<P><FONT SIZE="+1" COLOR="#ff0000"><B><% shift %></B></FONT>
+<P><FONT SIZE="+1" COLOR="#ff0000"><% shift |h %></FONT>
 
 %}
 
diff --git a/httemplate/elements/tr-select-reason.html b/httemplate/elements/tr-select-reason.html
index 42cd3d5bb..c12962ee2 100755
--- a/httemplate/elements/tr-select-reason.html
+++ b/httemplate/elements/tr-select-reason.html
@@ -87,7 +87,7 @@
   <TD ALIGN="right">
     <P id="new<% $name %>Label" style="display:<% $display %>">New Reason</P>
   </TD>
-  <TD><INPUT id="new<% $name %>" name="new<% $name %>" type="text" value="<% $init_newreason %>" disabled="<% $disabled %>" style="display:<% $display %>"></TD>
+  <TD><INPUT id="new<% $name %>" name="new<% $name %>" type="text" value="<% $init_newreason |h %>" disabled="<% $disabled %>" style="display:<% $display %>"></TD>
 </TR>
 
 <%init>